Tickets :: Comment on [#4492] CSRF protection with form tokens

* Your Email Address
* Spam protection	Enter the letters below: .. ,.__ .___. __. \| \./ \| \ \| (__ \__\| \| \|__/ \| .__)
Comment	> The token needs to be not just present, but valid. We'll need to give > each form a unique id to track that sort of thing, and store the > expected token for it either in the session or by something we can > look up in Token (or other) storage.
Attachment
Watch this ticket